Skip to content
OpenAdvisories

Vendor

saltcorn

4 known vulnerabilities.

Products

saltcorn 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-42259

    Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass)

    Saltcorn is an extensible, open source, no-code database application builder. Prior to versions 1.4.6, 1.5.6, and 1.6.0-beta.5, Saltcorn validates the post-login dest parameter with a string check that only blocks :/ and //. Because all WHATWG-compliant brows…

    saltcorn saltcorn @saltcorn/server npm
  • Medium 6.5
    CVE-2024-47818

    Logged-in users with any role can delete arbitrary files in @saltcorn/server

    Saltcorn is an extensible, open source, no-code database application builder. A logged-in user with any role can delete arbitrary files on the filesystem by calling the `sync/clean_sync_dir` endpoint. The `dir_name` POST parameter is not validated/sanitized a…

    saltcorn saltcorn @saltcorn/server npm